Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IIueWyGVjezrEUiAMwkgjJvzVuc.roa
File: IIueWyGVjezrEUiAMwkgjJvzVuc.roa (raw, json)
Hash identifier: LVxdMBzT2k1X5PN+5QIc760n8eSMa7WBFqinMgJCbzw=
Subject key identifier: 20:8B:9E:5B:21:95:8D:EC:EB:11:48:80:33:09:20:8C:9B:F3:56:E7
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 01877EFDE6D1F74A05EA9963D41F8D0875A6
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IIueWyGVjezrEUiAMwkgjJvzVuc.roa
Signing time: Fri 14 Apr 2023 08:59:41 +0000
ROA not before: Fri 14 Apr 2023 08:59:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 5.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Jul 2023 13:35:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7e:fd:e6:d1:f7:4a:05:ea:99:63:d4:1f:8d:08:75:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Apr 14 08:59:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=208b9e5b21958deceb1148803309208c9bf356e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:a5:08:1b:77:62:4f:79:61:4f:5e:d1:15:
ee:4e:b8:61:fa:98:21:4e:e6:4d:92:f0:7e:a1:9f:
48:26:45:a2:4b:47:a1:09:22:0c:85:f5:69:8b:ea:
e4:0d:2b:55:54:18:3a:ff:cc:e6:77:2f:a5:18:98:
76:d7:c5:41:84:2c:1b:87:6a:7b:59:66:38:4b:96:
45:d3:21:9c:fc:03:ad:c3:3d:da:e8:6a:ad:d5:e2:
52:fb:3d:7f:93:6e:e5:a1:69:4f:2c:82:01:ad:be:
a8:a3:54:50:3c:fa:70:b3:f1:a7:f4:2e:36:c3:f7:
5d:5b:67:fa:eb:5c:42:cc:f3:ee:de:bd:24:ed:4a:
06:0a:fa:b3:ba:21:03:46:c9:13:59:82:2c:22:95:
05:61:99:e3:a0:25:46:83:2b:92:08:e9:c3:f9:f3:
53:1f:61:e8:15:a4:84:3f:ec:6e:a3:78:7c:97:bc:
7d:34:1c:81:7a:6f:b0:ea:b1:26:e8:3a:8e:48:f3:
d3:e8:5b:1b:ab:0c:94:94:70:3d:ce:f9:92:71:cb:
2f:85:29:ca:e7:36:8c:c7:9d:58:e4:65:b4:c3:94:
1b:b5:5c:12:fe:3d:5b:f0:24:b3:42:35:b6:04:f1:
51:7b:53:3e:d0:26:ba:ec:f5:5c:9f:0c:81:ca:be:
3a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:8B:9E:5B:21:95:8D:EC:EB:11:48:80:33:09:20:8C:9B:F3:56:E7
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/IIueWyGVjezrEUiAMwkgjJvzVuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.105.4.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:28:4c:f7:c6:9e:2b:0a:98:2d:c5:37:81:0b:c9:2c:b7:80:
40:0b:d9:46:31:e1:08:db:1d:6f:48:d0:02:e7:7d:7a:18:55:
27:a5:80:ae:a8:b0:5d:0b:8c:d9:13:db:39:ee:ba:7e:0b:1d:
1a:18:3d:a3:dc:5b:c0:2d:bc:a7:60:6e:c8:b4:90:78:a7:91:
df:e5:3a:ba:ea:57:bd:c1:fe:37:cd:87:2f:c1:55:9a:88:81:
e6:cb:bd:74:ff:4a:3e:a9:0b:f9:04:d8:c5:26:c1:f9:6c:46:
5b:09:1e:f0:f7:42:5b:94:3c:c0:5a:10:d1:fe:2a:74:a4:70:
84:bc:3f:a3:af:fd:12:42:02:c3:88:b4:88:a7:1a:43:6f:91:
46:ab:88:f3:51:92:33:63:ed:cb:61:d8:10:b8:76:3e:79:74:
1e:81:0b:c9:b4:f4:65:13:52:2c:fd:be:1e:1b:ac:ff:25:c8:
54:bc:75:ae:e3:66:20:88:84:03:55:45:43:7c:2c:99:e5:c1:
95:10:f4:c5:c7:e6:11:6e:17:6a:d5:1a:07:3a:e1:4f:1f:42:
b3:70:97:e4:fe:7f:b2:d3:73:36:51:c9:63:bf:56:86:e7:f0:
58:36:80:93:9c:4a:ec:2b:1a:3c:56:27:4f:2f:fd:92:01:40:
80:12:4c:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd+/ebR90oF6plj1B+NCHWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZjhiNDUyNTRlNTQ3MGQxZDRjY2U2ZmI3ZGZkNGQwZDgz
YjVkNTkwHhcNMjMwNDE0MDg1OTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDhiOWU1YjIxOTU4ZGVjZWIxMTQ4ODAzMzA5MjA4YzliZjM1NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL6lCBt3Yk95YU9e0RXuTrhh+pgh
TuZNkvB+oZ9IJkWiS0ehCSIMhfVpi+rkDStVVBg6/8zmdy+lGJh218VBhCwbh2p7
WWY4S5ZF0yGc/AOtwz3a6Gqt1eJS+z1/k27loWlPLIIBrb6oo1RQPPpws/Gn9C42
w/ddW2f661xCzPPu3r0k7UoGCvqzuiEDRskTWYIsIpUFYZnjoCVGgyuSCOnD+fNT
H2HoFaSEP+xuo3h8l7x9NByBem+w6rEm6DqOSPPT6FsbqwyUlHA9zvmSccsvhSnK
5zaMx51Y5GW0w5QbtVwS/j1b8CSzQjW2BPFRe1M+0Ca67PVcnwyByr46UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCLnlshlY3s6xFIgDMJIIyb81bnMB8GA1UdIwQY
MBaAFN34tFJU5UcNHUzOb7ff1NDYO11ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2It
ODkzOTA2ZmI3ODU4LzEvSUl1ZVd5R1ZqZXpyRVVpQU13a2dqSnZ6VnVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84ZmM3NDYtZmMwOC00MjExLWJhM2ItODkzOTA2ZmI3ODU4
LzEvM2ZpMFVsVGxSdzBkVE01dnQ5X1UwTmc3WFZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWkEMA0G
CSqGSIb3DQEBCwUAA4IBAQC/KEz3xp4rCpgtxTeBC8kst4BAC9lGMeEI2x1vSNAC
5316GFUnpYCuqLBdC4zZE9s57rp+Cx0aGD2j3FvALbynYG7ItJB4p5Hf5Tq66le9
wf43zYcvwVWaiIHmy710/0o+qQv5BNjFJsH5bEZbCR7w90JblDzAWhDR/ip0pHCE
vD+jr/0SQgLDiLSIpxpDb5FGq4jzUZIzY+3LYdgQuHY+eXQegQvJtPRlE1Is/b4e
G6z/JchUvHWu42YgiIQDVUVDfCyZ5cGVEPTFx+YRbhdq1RoHOuFPH0KzcJfk/n+y
03M2Ucljv1aG5/BYNoCTnErsKxo8VidPL/2SAUCAEkxE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:27 2024 by rpki-client on console-fra.rpki-client.org